FormsAuthentication with Session ?

Hello,

I like how easy it is to use FormsAuthentication.SetAuthCookie() to log in a user.

BUT :) ... , i need to also store some information about the users roles and other data that i dont want to expose to the client at every single request.

Instead of sending all the information encrypted to the client at every page response, and have to decrypt it on every page request, it would be much easier (it seems) to just use a session and only send the SessionID in a cookie and then have all the information in the memory on the server (or later in a sql server).


So i want to know how i can make (etc.) FormsAuthentication work with a Session instead of a Cookie ?


Best regards

Martin


ps. i dont want to include the sessionID or anything in the url.
...